CT AI and privacy rules start Oct. 1, add disclosure, pricing limits
Connecticut’s AI and data privacy statutes begin enforcement on Oct. 1, 2026, imposing new obligations on businesses that operate in the state. Employers must give applicants plain‑language notice when AI influences hiring decisions and cannot rely on such systems to avoid discrimination liability.
The CART Act requires companies offering AI subscriptions to disclose key terms in writing and obtain consumer acceptance, while protecting whistleblowers who work on large frontier models. Expanded data privacy rules ban the sale of Connecticut residents’ genetic information, create a data broker registry, and limit facial recognition, precise geolocation and algorithmic pricing that uses personal data. These pricing restrictions mirror those in California, New York and Maryland, and enforcement of the overall framework falls mainly to the state Attorney General’s Office.
“This is a start. This is not a finish; this is not a ceiling. This is the floor,” Sen. James Maroney, D-Milford, co-chairman of the legislature’s General Law Committee and lead architect of the new AI and data privacy regulations said.
Before this week, Connecticut already had a data privacy law in place. The new legislation expands that act by adding a data broker regulatory framework and banning the sale of residents’ genetic information.
What we know
A pair of laws governing artificial intelligence and data privacy will take effect in Connecticut Thursday (Oct. 1), introducing a new compliance regime for businesses operating in the state.
Beginning Jan. 1, 2027, companies must alert chatbot users that they are not interacting with a human, and must implement new safeguards concerning suicide, self-harm and interactions with minors.
Additional youth-related social media provisions follow on Jan. 1, 2028, including parental controls and new default setting requirements that will limit when minors receive notifications, as well as limits on what information platforms can display to younger users.
The pricing provision aligns Connecticut with California, New York and Maryland, each of which have also enacted restrictions on the use of personal data to set prices on goods, rent and other transactions.
Although a number of state agencies are responsible for different portions of the laws, the bulk of the enforcement power will rest with the Attorney General’s Office.